[ubuntu-cloud-archive/stein-proposed] ceph (Accepted)
Corey Bryant
corey.bryant at canonical.com
Wed Jun 26 13:05:14 UTC 2019
ceph (13.2.4+dfsg1-0ubuntu2.1~cloud0) bionic-stein; urgency=medium
.
* New update for the Ubuntu Cloud Archive.
.
ceph (13.2.4+dfsg1-0ubuntu2.1) disco-security; urgency=medium
.
* SECURITY UPDATE: encryption key leak in log
- debian/patches/CVE-2018-16889.patch: sanitize customer encryption
keys from log output in src/rgw/rgw_auth_s3.cc,
src/rgw/rgw_rest_s3.cc.
- CVE-2018-16889
* SECURITY UPDATE: civetweb file descriptor leak
- debian/patches/CVE-2019-3821.patch: properly close connection in
src/civetweb/src/civetweb.c.
- CVE-2019-3821
Date: Tue, 25 Jun 2019 12:21:25 +0000
Changed-By: Openstack Ubuntu Testing Bot <openstack-testing-bot at ubuntu.com>
Signed-By: Openstack Ubuntu Testing Bot
Published-By: Corey Bryant <corey.bryant at canonical.com>
More information about the Cloud-archive-changes
mailing list